Which characteristic is a potential security weakness of a traditional stateful firewall?

Which characteristic is a potential security weakness of a traditional stateful firewall?
A. It cannot support UDP flows.
B. It cannot detect application-layer attacks.
C. It cannot ensure each TCP connection follows a legitimate TCP three-way handshake.
D. It works only in promiscuous mode.
E. The status of TCP sessions is retained in the state table after the sessions terminate.
F. It has low performance due to the use of syn-cookies.